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(57) Abstract 



A communications system capable of providing enhanced data integrity and reliability through redundant buses (I07R, 107L, 107LB), 
and a network interface controller for use therewith arc disclosed. Redundant conductors (107) conforming to well-known ethcrnet standards 
interconnect electronics components. Each component communicates with the conductors (107) through a single network interface card 
(NIC). Each NIC comprises an ethemet compliant transceiver (101A-C) for each ethemet conductor (107) in communication with the 
component. Microcontrollers (112) embedded in each NIC synchronously and deterministically place data on the ethemet conductors 
(107) according to a timing scheme stored in a non-volatile memory (113) means. A heartbit/power monitor (1 14) is also provided to 
ensure that data cannot be transmitted in the event of a microcontroller (112) failure. Through the inventive elements presented herein, the 
communications system provides a high degree of redundancy and fault-tolcrancc and is therefore well-suited to critical applications in 
avionics communication. 
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LOW COST REDUNDANT COMMUNICATIONS SYSTEM 
BACKGROUND OF THE INVENTION 
1. Field of the Invention 

The present invention relates to data bus networks. More particularly, this 
5 invention is a method and apparatus for implementing a redundant data bus network 

utilizing standard components. The present invention is particularly well-suited for use 
in a data network interconnecting avionics components onboard an aircraft. 



2. Description of the Prior Art 

10 Networking architectures connecting computers are well known in the prior art. 

Microprocessor based systems are widely interconnected by data networks, allowing for 
high speed data sharing, parallel processing and communication. 

A number of methods and devices that allow computers to communicate exist. 
Ethernet, for example, is described in IEEE standard 802.3 and in U.S. Patent No. 

15 4,063,220 issued to Metcalfe et al. on December 13, 1977. which is hereby incorporated 
by reference. Because ethernet is the world's most popular local area networking 
scheme, a number of low-cost components for implementing ethcrnets are widely 
available throughout the world. 

The ethernet standard encompasses several varieties of cabling. 10base2 

20 ethernet, for example, uses a coaxial cable of not more than 185 meters in length that is 
capable of transmitting ten megabits of information per second. lObaseT ethernet is 
also capable of transmitting ten megabits of information per second, but utilizes 
shielded twisted pair cables. All forms of ethernet utilize passive cables; devices 
communicating via the ethernet must contain active components. Typically, computing 

25 systems communicate over the ethernet through a standard network interface controller 
(NIC) that is well-known in the art. NICs are active devices that normally receive 
power from their associated computing hosts. 

Figure 1 describes a prior art NIC 106 containing transceiver 101 and a 
backplane interface 104. The transceiver 101 is capable of transmitting and receiving 

30 analog signals via an ethernet 107 and of converting these analog signals to digital 

equivalents. Backplane interface 1 04 is capable of transferring data between the NIC 
and the backplane bus 105, which is a component of a processing device such as a 

SUBSTITUTE SHEET (RULE 26) 
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personal computer. Transceiver 101 and backplane interface 104 are coupled by a pair 
of conductors 1 19L and 1 19R, one for data to be transmitted on the ethernet and one for 
data received from the ethernet. Typically, communications between the backplane and 
the ethernet are controlled by a well-known system network interface controller (SNIC) 
5 103 that transfers data between interface 104 and transceiver 101 . An isolation circuit 
102 is typically provided between transceiver 101 and SNIC 103 to insure signal quality 
by eliminating ground loops and faults. The isolation means 102 also serves to disable 
communications by the NIC 1 06 when a malfunction is detected. 

Ethernet is an asynchronous protocol using a Carrier Sense Multiple Access with 

10 Collision Detect (CSMA/CD) access scheme. No central host controls access to the 

network, and no clocking scheme is utilized to control access to the conductor. Rather, 
NICs with data to transmit first check the ethernet to determine if it is busy transferring 
data from another host. If the ethernet is free, the NIC will transmit the data 
immediately. If the ethernet is busy, however, the NIC will wait a random period of 

15 time before re-checking for ethernet traffic. The ethernet standard limits the duration 
and frequency of data transmissions. If two NICs on the same ethernet begin 
transmitting simultaneously, each will sense that data has "collided" and will re-transmit 
after a random period of time. 

When the ethernet remains very busy for a prolonged period of time, collisions 

20 and re-transmissions become more frequent. Each re-transmission creates additional 

traffic on the ethernet, and collision frequency can increase exponentially. As collision 
frequency increases, the time necessary to transmit data across the bus also increases. 
Because the CSMA/CD access scheme is asynchronous and non-deterministic, prior art 
ethernets are unsuitable for use in critical applications where immediate data 

25 transmissions are essential. In avionics applications, for example, a windshear detector 
or collision avoidance system may need to transmit an immediate warning to an 
autopilot system or to an output device. Because such signals may affect the safety of 
the aircraft, it is essential that they be transmitted without delay. Even a potential risk 
of transmission delay is unacceptable in such applications. Moreover, avionics 

30 components require certain information to be provided synchronously. Attitude and 
altitude readings, for example, must be provided to avionics components at regular 
intervals without fail. Inexpensive ethernet networks provide high bandwidth and 
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proven physical layer characteristics; however, ethernet's asynchronous nature is too 
unstable for environments where data integrity and reliability are critical. 

Modern aircraft include a number of digital avionics components such as traffic 
alert and collision avoidance systems (TCAS), autopilots, flight management systems 
5 (FMS) and integrated radio systems communicating over a system bus. Because the 

avionics system bus is essential to the inter-communication of avionics components and 
therefore the safety of the aircraft, the system bus must be highly reliable and fault 
tolerant. 

Prior art avionics buses have utilized redundant conductors to improve 
D reliability. Network standards such as the Avionics System Communications Bus 
(ASCB) allow avionics components within an aircraft to work together safely and 
efficiently. ASCB is a synchronous networking protocol, meaning that each component 
has an allotted share of guaranteed bandwidth. Referring to Figure 2, ASCB includes 
four conductors 107 connecting two sets of avionics components 110 corresponding to a 
5 pilot's side and a copilot's side. Each avionics component 1 1 0 transmits data on an 
onside data bus and receives data via both the onside and cross-side data buses. In 
figure 2, conductor 107L is the onside bus and conductor 107R is the cross-side bus for 
components 1 10A, 1 1 OB, 1 10C and 1 10D. For components 1 10E, 1 10F, 1 10G and 
1 10H, conductor 107R is the onside bus and conductor 107L is the cross-side bus. Thus 
' the onside bus for components on one side of the aircraft is the cross-side bus for 
components on the other side of the aircraft. 

— Two backup buses 107LB and 107LR provide added redundancy by connecting 
those components on the same side of the aircraft. Each avionics component 1 10 is 
therefore in communication with at least three conductors: components send and 
receive data via the on-side and backup buses, and receive data from components on the 
opposite side of the aircraft via the cross-side bus. 

While ASCB and other avionics buses such as MIL-STD-1 553B provide the 
reliability necessary for avionics applications, these bus architectures have a number of 
marked disadvantages. Most notably, prior an avionics buses provide significantly 
lower bandwidth than comparable non-avionics bus technologies. Moreover, prior art 
buses are relatively expensive to implement because they have not been readily adopted 
for non-avionics applications. The specialized nature of prior art avionics buses has 
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resulted in high costs of design, manufacturing and support. Moreover, the specialized 
nature of prior art avionics buses makes re-configuration difficult. System changes, 
expansion, and upgrades are complicated, expensive and time-consuming. 

5 SUMMARY OF THE INVENTION 

It is an object of the present invention to provide an avionics bus architecture 
that provides reliable and redundant data communications with a high bandwidth. 

It is a further object of this invention to provide an avionics bus based upon low- 
cost physical layer components readily available from multiple suppliers. 
0 It is a still further object of this invention to provide synchronous and 

deterministic access to an ethernet network. 

It is a still further object of this invention to provide a network interface 
controller for a redundant avionics bus network that is capable of providing a power 
monitor and "heartbeat" signal. 
5 It is a still further object of this invention to provide an avionics communications 

system that is easily expandable and re-configurable. 

According to this invention, there is provided a redundant bus network including 
at least four coaxial cables serving as data conductors. Each avionics component 
utilizing the bus network communicates through a NIC that is comprised of at least 
3 three transceivers, at least two SNICs and a microcontroller means capable of directing 
data between the avionics component backplane bus and the coaxial cables. The 
microcontroller means transmits and receives data based upon a lookup table stored in a 
non-volatile memory means. 

The above and other objects, features, and advantages of the present invention 
> will become apparent from the following detailed description of illustrative 

embodiments thereof to be read in conjunction with the accompanying drawings, in 
which like reference numerals are used to identify the same or similar parts in the 
similar views. 



30 



BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a block diagram of a prior art ethernet network interface controller. 
FIG. 2 is a block diagram of a prior art avionics bus. 
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FIG. 3 is a block diagram of the present communications system. 
FIG. 4 is a block diagram of a first embodiment of a network interface 
controller. 

FIG. 5 is a timing diagram representing transmission data stored in a non- 
5 volatile memory means. 

FIG. 6 is a block diagram of a second embodiment of a network interface 
controller. 



DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 

10 For purposes of illustration, the communications architecture of the present 

invention is specifically described herein as being used to implement a network of 
avionics components. However, the bus architecture can also be used to implement a 
variety of other systems that require a high level of redundancy and reliability. For 
example, the bus architecture could be used in a network of health monitoring apparati, 

15 or in a climate or environmental control system. 

Referring to Figure 3, avionics components 1 10 are organized into a pilot's side 
and a co-pilot's side. There is provided a pilot's bus 107L and a co-pilot's bus 107R, 
each bus being in communication with each avionics component 1 10. 

In addition to the primary pilot's bus 107L and co-pilot's bus 107R, a pilot's 

20 backup bus 107LB and a co-pilot's backup bus 107RB interconnect avionics 

components 1 10 on the same side of the aircraft. It is a critical component of this 
invention that each bus conform to IEEE 802.3 ethernet standards. In the preferred 
embodiment, each bus will be embodied as a coaxial cable. RG-58 thin coaxial cable is 
particularly well-suited to the present invention, although any type of coaxial cable 

25 conforming to the ethernet specification may be used. 

Avionics components 1 1 0 communicate via the ethernet-compliant data buses 
107. Each avionics component utilizes a network interface controller (NIC) 1 1 1 to 
transmit and receive data. The NICs utilized in the present system communicate 
simultaneously with the pilot's side bus 107L, the co-pilot's side bus 107R, and at least 

30 one backup bus. These NICs may be coupled to each data bus through standard ethernet 
connectors. For example, if the cables correspond to 10base2 ethernet specifications, 
NICs may interface with the cables through widely-available BNC-type connectors. All 
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embodiments of the present communications system conform to ethernet physical layer 
specifications; all electrical connections between the NICs and the buses comply with 
the IEEE 802.3 standard. 

Figure 4 discloses a NIC suitable for use in the present communications system. 

5 The NIG includes three prior art ethernet transceivers 1 0 1 A, 1 0 1 B and 1 0 1 C 

corresponding to each bus in communication with the NIC. In the embodiments shown, 
three transceivers 101 correspond to an onside bus 107L, a cross-side bus 107R and a 
backup bus 107LB. Each transceiver 101 is capable of receiving analog signals on the 
associated ethernet bus and of converting these analog signals to digital equivalents that 

10 can be transmitted through the NIC to an avionics component 1 1 0. Each transceiver is 
also capable of receiving digital signals from the avionics component 1 1 0 and 
converting these signals to analog equivalents for transmission on the ethernet bus. 

Each transceiver communicates with a prior art system network interface 
controller (SNIC) 103 capable of exchanging digital data between the transceiver 101 

15 and random access memories acting as data buffers. Two receive buffers 1 15 and 1 16, 
corresponding to data received from onside and cross-side buses, are provided along 
with a single transmit buffer 117. 

Each buffer communicates with a backplane bus 105 which is an integral part of 
or otherwise communicates with an avionics component 1 1 0. Data that has been stored 

20 in the receive buffers 1 1 5 and 1 1 6 may be made available to the avionics component 
1 1 0 through a memory addressing scheme whereby the avionics component 1 1 0 
intermittently polls each receive buffer to determine if any received data is waiting. 
Alternatively, received data may be made available to the avionics component 1 1 0 by 
simulcasting or "fanning out" accumulated data across the backplane bus 1 05 at a 

25 regular time interval. 

Similarly, data that is to be transmitted by the NIC on the ethernet buses passes 
from the backplane bus 105 to a transmit buffer 117. Data may be placed in the transmit 
buffer 1 17 through synchronous or asynchronous polling of backplane bus 105, or by 
data simulcast across the backplane bus 105 at regular or interrupt-driven intervals. 

30 In preferred embodiments, transceivers 101 and SNICs 103 are separated by 

prior art isolation means 102. Although isolation circuits 102 are not necessary to 
implement the NIC, they are useful in improving signal quality and reliability. 
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Moreover, the isolation means 102 are capable of preventing transmissions on the 
ethernet buses 107 if the NIC should fail, thus preventing the distribution of corrupt or 
inaccurate data. 

A critical component of the invention is a microcontroller 1 12 positioned in 
5 communication with SNICs 103. Although the electrical characteristics of data 

transmissions on ethernet buses 107 conform to the IEEE 802.3 standard, access to the 
buses is not according to the ethernet CSMA/CD scheme. Rather, the microcontroller 
1 1 2 sequences data transmissions on each ethernet bus according to a table stored in a 
non- volatile memory 113. The table is unique to each implementation of the 
0 communications system, with each avionics component 1 10 being allocated a fixed 
amount of bandwidth in a pre-determined sequence. Each component is guaranteed 
periodic access to the network according to the lookup table. Hence, access to ethernet 
buses 107 is not CSMA/CD, but rather is synchronous and deterministic. 

Because the timing sequence affects all components communicating on the 
ethernet buses 107, all NICs utilizing the buses 107 must retain identical timing tables 
in non-volatile memory. Sequencing data transmissions according to a timing table 
allows for improved reliability, since all avionics components can anticipate and 
monitor the communications of other components. Moreover, each component is 
guaranteed periodic access to the bus, thus insuring that critical messages can be passed 
along the bus without delay. 

In the preferred embodiments of the communications system, a circuit 1 14 
monitors the availability of electric power and the "heartbeat" of microcontroller 1 12. 
Heartbeat signals, also known as "watchdog" signals, are based upon the frequency of 
data transmission and are well-known in the prior art. If power should fail or 
microcontroller 1 12 should malfunction, the monitor 114 identifies the condition and 
disables transmissions before corrupted data can be broadcast to other components via 
the ethernet buses 107. Transmissions on the ethernet buses 1 07 may be disabled by 
shutting down transceivers 101 or SNICs 103, by clearing the transmit buffer 1 17, or by 
creating an open circuit within isolation circuits 102. 

Referring to Figure 5, a hypothetical timing scheme that could be represented in 
a non-volatile memory of a microcontroller is disclosed. Bandwidth is allocated 
according to frames, each frame being of a fixed time duration. For example, each 
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frame could represent 10 microseconds. Each component communicating via the 
ethernet buses retains the same timing information; each component transmits data in 
sequence according to the timing table. One avionics component is arbitrarily chosen to 
initiate data transmissions on the bus, and the NIC associated with that component is 
5 identified as a bus controller. In Figure 5, for example, an EFIS1 system is identified as 
the bus controller. All components monitor transmissions of all other components on 
the ethernet buses. Therefore, when the bus controller begins transmitting, all other 
components receive data from the bus controller and recognize the beginning of the 
transmit sequence. Referring to Figure 5, the EFIS1 bus controller receives the full 
10 bandwidth of the ethernet buses for a fixed period of time. When the EFIS1 has 

completed its transmission, all components recognize a brief timing gap. Then, EFIS2, 
which is the next component in the table, transmits data on its onside and backup buses 
for the duration of its time allocation. Data transmissions are synchronous, since all 
transmissions take place for a fixed duration of time. Data transmissions are also 
15 deterministic, since each component is allocated transmission time in a pre-determined 
order. Each avionics component is therefore guaranteed access to the buses at regular 
intervals for fixed time durations. 

Because the bus access scheme of the present communications system is 
synchronous, it is critical that components have a fault-tolerant means for frame timing. 
10 For the timing scheme disclosed herein to function properly, it is critical that at least 
those components on the same side of the aircraft substantially synchronize their bus 
communications. Moreover, it is highly desirable that components on opposite sides of 
the aircraft be in close synchronization. Therefore, components must have a method of 
identifying a common "time zero". 
- 5 One method of synchronizing transmissions arbitrarily designates two avionics 

components on each side of the aircraft as bus controllers. The first bus controller to 
power up and come online to the network will be the primary bus controller, and the 
second to come online will be the secondary bus controller. Either bus controller can 
transmit a starting sequence on the onside and backup buses; other components on the 
10 same side of the aircraft will receive these transmissions and recognize the starting point 
of the communications sequence. If neither bus controller becomes active, or if a bus 
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controller fails, other components on the network can obtain a clock signal through the 
cross-side bus from bus controllers operating on the opposite side of the aircraft. 

Moreover, bus controllers on opposite sides of the aircraft can monitor each 
other through the cross-side buses. By monitoring the flow of data on the cross-side 
5 buses, bus controllers can ensure that clock signals remain in check across the aircraft. 

Referring again to Figure 4, a NIC is implemented with three half or full duplex 
SNICs 103 A, 103B and 103C, each SNIC corresponding to a transceiver (101 A, 101B 
and 101C, respectively) in communication with an ethernet bus (107L, 107LB and 
107R, respectively). Dotted lines represent paths of data to be transmitted on the 
10 ethernet buses; solid lines indicate paths of data received. In the preferred embodiment 
shown, the controller receives data via all three buses 107L. 107LB and 107R, but 
transmits data only on onside bus 107L and backup bus 107LB. This arrangement 
maximizes bandwidth allocation across all buses while ensuring that each component is 
capable of receiving data from all other components, including those on the opposite 
15 side of the aircraft. The microcontroller 1 12 monitors data communications of each 
component and compares the contents of data received with the timing table stored in 
non- volatile memory 113. 

When data is received from a component on the opposite side of the aircraft, 
microcontroller 1 12 instructs SNIC 103C coupled to the cross-side transceiver 101C to 
20 transfer data to a receive buffer 1 15 for eventual simulcast across backplane bus 105. 
When a component on the same side of the aircraft transmits data, however, identical 
data can be received via either the onside bus 107L or backup bus 107LB. A switching 
means (not shown), which may be implemented in software in the microcontroller or as 
a hardware element, determines whether the onside or backup SNIC passes the 
25 information received to the second receive buffer. 

Component data to be transmitted accumulates in the transmit buffer 1 1 7 as 
discussed above. When the microcontroller 1 12 identifies that the transmit period 
corresponding to component 1 10 has arrived, it directs onside SNIC 103 A and backup 
SNIC 103B to obtain data from transmit buffer 1 17 and to pass the data to the respective 
30 onside and backup transceivers 101 A and 101B for transmission on ethernet buses 107L 
and 107LB, respectively. In this manner, data can be transmitted and received from the 
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various components via the multiple buses in accordance with the tables retained by the 
microcontroller. 

Referring now to Figure 6, a second embodiment of the network interface 
controller is disclosed. As in Figure 4, solid lines represent paths of data received and 
5 dashed lines represent paths of data to be transmitted. Although each NIC is in 

communication with an onside bus 107L, a cross-side bus 107R and a backup bus 
107LB as in the previous embodiment, only two SNICs 103 A and 103B are utilized. 
Because each SNIC may transmit on one bus while receiving on another bus, full- 
duplex SNICs must be used to ensure rapid and reliable data handling. 

10 The microcontroller 1 12 again directs data handling in accordance with a lookup 

table retained in non-volatile memory 113. When the table indicates data received from 
a cross-side component, microcontroller 112 directs SNIC 103B to transfer data 
received on the cross-side bus 107R to a first receive buffer 115. When data is received 
from on onside component, however, a switch 1 18 is necessary to determine whether 

15 backup or onside data is provided to the SNIC. This switch may be implemented as 
hardware or software, and is directed by microcontroller 122. Whether onside or 
backup data is provided to SNIC 103 A, the microcontroller 122 will direct SNIC 103A 
to place data received in a second receive buffer 116. 

Data to be transmitted by the network interface controller passes from the 

20 backplane bus 105 of the avionics component 1 10 to the transmit buffer 1 15 as 

described above. When the timing table indicates that the component's transmit time 
has arrived, microcontroller 122 will direct SNICs 103A and 103B to obtain data from 
transmit buffer 117 and to transmit the data on ethernet buses 107L and 107LB, 
respectively. Note that while SNIC 103B receives data from the cross-side bus 107R, it 

25 transmits data on the onside backup bus 107LB. 

The corresponding structures, materials, acts and equivalents of all means or step 
plus function elements in the claims below are intended to include any structure, 
material, or acts for performing the functions in combination with other claimed 
elements as specifically claimed. The scope of the invention should be determined by 

30 the appended claims and their legal equivalents, rather than by the examples given. 
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CLAIMS 

is claimed is: 

A network interface controller for a redundant communications bus, said 
network interface controller comprising: 
at least three transceivers; 

a plurality of system network interface controllers (SNICs), each 
SNIC being in communication with at least one of 
said transceivers; and 
a microcontroller means in communication with each of said 

SNICs, said microcontroller means being capable 
of sequencing data transmitted by said transceivers 
on said redundant communications bus. 

The network interface controller of claim 1, wherein said microcontroller means 
15 communicates with a non- volatile memory means having a lookup table, said 

lookup table corresponding to a timing sequence for transmitting data on said 
redundant communications bus. 

3. The network interface controller of claim 1 , wherein said transceivers and SNICs 
20 substantially conform to IEEE standard 802.3. 

4. — The network interface controller of claim 2, further comprising meaiis capable of 

monitoring electrical power supplied to said microcontroller. 

25 5. The network interface controller of claim 4, further comprising a watchdog 
means capable of monitoring the heartbeat of said microcontroller. 

6. A redundant communications system for electronics components comprising: 

a plurality of conductors; 
30 a plurality of network interface controllers, each network 

interface controller being in communication with one of 
said electronics components and comprising: 

i 
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a plurality of transceivers, each transceiver 

corresponding to one of said conductors; 
a plurality of system network interface controllers 

(SNICs), each SNIC being in 
5 communication with at least one 

transceiver and said electronics 

component; and 
a microcontroller means coupled to said SNICs 

and being capable of sequencing data 
1° transmitted on said conductors. 

7. The communications system of claim 6 wherein said conductors substantially 
conform to IEEE standard 802.3. 

15 8. The communications system of claim 7 wherein said conductors are coaxial 
cables. 

9. The communications system of claim 6 wherein said electronics components are 
avionics components. 



20 



25 



10. The communications system of claim 9 wherein said microcontroller means 
—further comprises a non-volatile memory means having a lookup table, said 

lookup table corresponding to a timing sequence for transmitting said data on 
said redundant communications bus. 

11. A communications system of claim 10 wherein said timing sequence is 
synchronous and deterministic. 



12. A communications system of claim 1 1 further comprising means for verifying 
30 the presence of electric power and the heartbeat of said microcontroller. 



WO 98/15088 PCT/US97/17632 

-13- 

13. A communications system of claim 12 wherein said transceivers and said SNICs 
conform to IEEE standard 802.3. 

14. A method of transmitting data between avionics components comprising the 
5 steps of: 

providing a plurality of ethernet-compliant communications 
media; 

providing a plurality of network interface controllers, each 

network interface controller corresponding to one of said 
1° avionics components and being in communication with 

each of said communications media; and 
sequencing transmissions of said avionics components according 
to a table maintained in each of said network interface 
controllers. 

15 

15. The method of claim 14 wherein said ethernet-compliant communications media 
are coaxial cables. 

16. The method of claim 15 wherein said network interface controllers comprise: 
20 a plurality of transceivers, each transceiver corresponding to a 

communications medium; 
— a plurality of SNICs, each SNIC communicating with at least one 

transceiver; and 
a microcontroller means in communication with said SNICs 
25 capable of directing data between the communications 

media and said avionics components. 

17. The method of claim 16 wherein said network interface controllers further 
comprise a buffer means in communication with said SNICs. 

30 

18. A communications system of claim 17 further comprising means for verifying 
the presence of electric power and the heartbeat of said microcontroller. 
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